In addition to the other suggestions in the thread:
* meta: learn to know yourself if you don’t already. It’s half the battle. I took an MBTI course that was tremendously helpful; well-done career counseling can also help in that it can make you understand your intrinsic motivations, and from there figure out what you need to be happy.
* security training. These come in two flavors, operational and normative (usually some flavor of iso 27k). If you come from a dev background you’ll probably already have some operational knowledge (owasp top 10, sysadmin hygiene, etc) but it’s always worthwhile to strengthen it especially in areas that may be new to you (infra hardening, managing a fleet of PCs for non-technical users, etc). Normative might seem like bullshit at first but when well done is helpful to structure the way you think about security (like, what assets are you trying to protect, from whom, and at what cost)
* business training might come in handy to hold your own in meetings. At least be comfortable with how a business case works and what your company’s BC is. This will allow you to have more productive discussions with the PM and understand, from a business perspective, which features you should focus on.